InfoSecBulletin Cybersecurity for mankind
Air France and KLM announced on Wednesday that their customer service platform was hacked, resulting in stolen data from an unknown number of customers.
Air France and KLM, along with Transavia, form the Air France–KLM Group, a French-Dutch airline holding company established in 2004, and a key player in global air travel.
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
The two airlines stated that they’ve cut off the attackers’ access to the compromised systems after discovering the breach and added that their networks were not affected by the attack.
“Air France and KLM have detected unusual activity on an external platform we use for customer service. This activity resulted in unauthorized access to customer data,” they said. “Our IT security teams, along with the relevant external party, took immediate action to stop the unauthorized access. Measures have also been implemented to prevent recurrence. Internal Air France and KLM systems were not affected.”
Air France and KLM confirmed that while customer data was accessed, financial and personal information remains secure. They have notified authorities and are informing those affected about the data breach.
“KLM has reported the incident to the Dutch Data Protection Authority; Air France has done so in France with the CNIL,” they added. “Customers whose data may have been accessed are currently being informed and advised to be extra vigilant for suspicious emails or phone calls.”
With a fleet of 564 aircraft and 78,000 employees, Air France-KLM provides services to up to 300 destinations in 90 countries. In 2024, the aviation group transported 98 million passengers worldwide.
